nerdexam
F5

201 · Question #294

A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server? (Choose two.)

The correct answer is A. TCP B. HTTP. To parse HTTPS traffic for HTTP header values using an iRule, the virtual server must be associated with both a TCP profile for basic layer 4 communication and an HTTP profile to enable layer 7 processing.

Section 7: Configure Advanced Features

Question

A site needs a virtual server that will use an iRule to parse HTTPS traffic based on HTTP header values. Which two profile types must be associated with such a virtual server? (Choose two.)

Options

  • ATCP
  • BHTTP
  • CHTTPS
  • DServerSSL

How the community answered

(50 responses)
  • A
    80% (40)
  • C
    14% (7)
  • D
    6% (3)

Why each option

To parse HTTPS traffic for HTTP header values using an iRule, the virtual server must be associated with both a TCP profile for basic layer 4 communication and an HTTP profile to enable layer 7 processing.

ATCPCorrect

A TCP profile is fundamental for any virtual server handling TCP-based traffic, including HTTPS. It manages the Layer 4 connection settings and must be assigned for basic network communication.

BHTTPCorrect

An HTTP profile is essential when an iRule needs to inspect or modify HTTP headers. For HTTPS traffic, after SSL decryption (typically handled by a Client SSL profile, not listed as an option), the traffic becomes readable HTTP, allowing the HTTP profile to enable Layer 7 processing capabilities for the iRule to access header information.

CHTTPS

There isn't a standard profile type specifically named 'HTTPS'; while a Client SSL profile handles the SSL encryption/decryption for HTTPS, an HTTP profile is still required to parse the underlying HTTP headers.

DServerSSL

A ServerSSL profile is used for re-encrypting traffic between the load balancer and backend servers, and it is not directly involved in parsing HTTP header values on the client-side decrypted traffic.

Concept tested: Virtual server profiles for HTTPS/HTTP iRule parsing

Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-local-traffic-manager-concepts/configuring-http-profiles.html

Topics

#virtual server profiles#iRules#HTTPS traffic#SSL offloading

Community Discussion

No community discussion yet for this question.

Full 201 Practice